Introduction

Picture this. It’s 4:30 pm on a Friday afternoon. You’ve just finished typing an important message to a group of parents about an upcoming school event. You copy and paste the email addresses from your list, hit send, and breathe a sigh of relief as you shut down your computer.

Five minutes later, your phone rings. A concerned parent says, “I can see everyone’s email addresses on this list… Did you mean to send it that way?” Your stomach drops.

For schools, councils, and organisations that work with children and families, privacy is not just a legal requirement – it is a promise you make to the people you serve. One small mistake, such as putting addresses in the TO field instead of BCC, can break that promise in an instant.

The recent Cardiff Council incident is a powerful reminder of how quickly things can go wrong – and why it is essential to have safeguards in place before you click “send.”

What Happened: Cardiff Council’s Email Blunder

In May 2025, Cardiff Council sent out an email to parents who were eligible for the Childcare Offer for Wales. The intention was simple – to share important information. But instead of using the BCC field, all email addresses were placed in the TO field. In one click, every parent could see the personal contact details of everyone else on the list.

The reaction was swift. The council issued an apology and asked parents to delete the message. But by then, the breach had already happened. Email addresses were exposed, and trust had been lost.

It’s the kind of mistake that takes only seconds to make but can take months, even years, to recover from.

Why Using BCC is So Effective

The BCC (Blind Carbon Copy) field hides the addresses of everyone listed there from other recipients. When your email is received, anyone in the To or CC fields will be visible to everyone, but those in the BCC field will remain completely hidden. No one else will see their email addresses.

If you are sending a message to multiple people who do not know each other, placing their addresses in the BCC (Blind Carbon Copy) field is the safest choice. It is a simple yet effective way to protect privacy and prevent the accidental sharing of personal contact details.

Another important benefit is how replies are handled. If someone replies to your email, their response will only be sent to the addresses in the To or CC fields, not to anyone in the BCC field. This helps prevent unnecessary or accidental group replies.

By using BCC, you safeguard personal information and maintain confidentiality.

The problem is it is easy to make this mistake. You cannot assume that users in your organization will remember to use BCC when they should.

Now, imagine having an Outlook add-in that could automatically warn you when there are too many recipients in the To or CC fields.

How SendGuard Safeguards Your Email

SendGuard for Outlook is an add-in designed to stop these mistakes before they happen. It works silently in the background until it detects something that could put your organisation at risk – then it steps in to give you a second chance to get it right.

SendGuard for Outlook has the ability to warn users when there are too many recipients in the TO and CC fields. This prompt will Prompts for users to BCC, to ensure large recipient lists are not in the TO field and moved to the BCC field.

In addition, SendGuard for Outlook includes a feature called SendConfirm. This feature allows users to confirm recipients and attachments even after clicking send. Also, this adds a secondary reminder for users to also move email addresses from the TO and CC field to the BCC field.

Why Organizations Need SendGuard

If you have ever sent a group email, you know how easy it is to make mistakes. SendGuard takes the guesswork out of bulk communications and acts as a built-in safety net for your organisation.

Benefits Include:

• Building trust with parents, staff, and stakeholders by protecting their information.
• Reducing human error by catching issues before the email is sent.
• Ensuring GDPR compliances.

In Summary

The Cardiff Council breach is a cautionary tale. Even experienced, well-intentioned staff can make errors that have serious consequences. Bulk email mistakes are entirely preventable when you have the right tools in place.

SendGuard ensures that before you send any email, you have the opportunity to review, correct, and protect the information you are about to share. In the education sector, where trust and privacy are paramount, this extra step can make all the difference.

Don’t wait for an incident to happen. Protect your communications now.

Free Trial / Demo Invitation

Discover how SendGuard can protect your organisation from costly email mistakes.
Start a free trial for your organization or book a demo by contacting us at sales@standss.com